]> Cypherpunks.ru repositories - gostls13.git/commit
net/http: preserve nil values in Header.Clone
authorDamien Neil <dneil@google.com>
Fri, 17 Jun 2022 17:09:45 +0000 (10:09 -0700)
committerDamien Neil <dneil@google.com>
Wed, 29 Jun 2022 22:28:30 +0000 (22:28 +0000)
commitb2cc0fecc2ccd80e6d5d16542cc684f97b3a9c8a
tree1bdaa3092fe0ed673cace25dcf1ddd74f423c24c
parent64ef16e77795957d47e3889bca9483d6f3099bbf
net/http: preserve nil values in Header.Clone

ReverseProxy makes a distinction between nil and zero-length header values.
Avoid losing nil-ness when cloning a request.

Thanks to Christian Mehlmauer for discovering this.

Fixes #53423
Fixes CVE-2022-32148

Change-Id: Ice369cdb4712e2d62e25bb881b080847aa4801f5
Reviewed-on: https://go-review.googlesource.com/c/go/+/412857
Reviewed-by: Ian Lance Taylor <iant@google.com>
Reviewed-by: Brad Fitzpatrick <bradfitz@golang.org>
src/net/http/header.go
src/net/http/header_test.go